738 matches found
EUVD-2023-53609
Malicious code in bioql PyPI...
EUVD-2021-9774
Malicious code in bioql PyPI...
EUVD-2021-9802
Malicious code in bioql PyPI...
EUVD-2022-32081
Malicious code in bioql PyPI...
EUVD-2022-35100
Malicious code in bioql PyPI...
Delta Electronics DTN Soft Code Execution Vulnerability
Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A security vulnerability exists in Delta Electronics DTN due to an insecure deserialization flaw in the handling of project files. An attacker can exploit the vulnerability to execute arbitrary code on t...
CVE-2012-10057
CVE-2012-10057 affects Lattice ispVM System v18.0.2 and is due to a buffer overflow when parsing the version attribute of the ispXCF XML tag in .xcf project files. This local, no-privilege path enables arbitrary code execution when a crafted .xcf is opened. Exploitation code/module exists (e.g., ...
PT-2025-33092 · Lattice Semiconductor · Ispvm System
Name of the Vulnerable Software and Affected Versions: Lattice Semiconductor ispVM System version 18.0.2 Description: Lattice Semiconductor ispVM System version 18.0.2 contains a buffer overflow issue in the handling of .xcf project files. When parsing the version attribute of the ispXCF XML tag,...
CVE-2025-40759
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 All versions V19 Update 4, SIMATIC STEP 7 V20 All versions V20 Update 4, SIMATIC WinCC V17 All versions V17 Update 9, SIMATI...
CVE-2025-40759
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 All versions V19 Update 4, SIMATIC STEP 7 V20 All versions V20 Update 4, SIMATIC WinCC V17 All versions V17 Update 9, SIMATI...
The vulnerability of the PlantSimCore.dll library in the Siemens Tecnomatix Plant Simulation software environment allows a perpetrator to execute arbitrary code.
The vulnerability of the PlantSimCore.dll library in the Siemens Tecnomatix Plant Simulation simulation environment involves buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created SPP files...
Delta Electronics DTN Soft 安全漏洞
Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A security vulnerability exists in Delta Electronics DTN due to an insecure deserialization flaw in the handling of project files. An attacker can exploit the vulnerability to execute arbitrary code on t...
PT-2025-27468 · Delta Electronics · Dtn Soft
Name of the Vulnerable Software and Affected Versions: Delta Electronics DTN Soft Project File affected versions not specified Description: The Delta Electronics DTN Soft application is susceptible to remote code execution due to the deserialization of untrusted data during the parsing of project...
CVE-2023-28730
A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files...
CVE-2023-0622
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these...
CVE-2023-49676
An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability...
CVE-2023-28729
A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files...
CVE-2023-28728
A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files...
CVE-2022-27579
A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the...
CVE-2021-22662
A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...